AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

HuaweiCVE-2026-49309

Permission control vulnerability in the Settings module

Huawei

CVE-2026-49309 · Published Sep 9, 2026

Medium4.8
No fix yet
Huawei advisory

Permission control vulnerability in the Settings module.

Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Affected versions

PackageAffectedFixed in
EMUI
Product
<= 16.0.0No fix yet
<= 15.0.0No fix yet
<= 14.2.0No fix yet
<= 14.0.0No fix yet
HarmonyOS
Product
<= 4.3.3No fix yet
<= 4.3.1No fix yet
<= 4.3.0No fix yet
<= 4.2.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-264

More Huawei advisories

All Huawei
Medium 4.3Sep 9Huawei HarmonyOS: denial of serviceCVE-2026-81644no fix yetMedium 5.9Sep 9Huawei HarmonyOS: out-of-bounds readCVE-2026-81646no fix yetMedium 5.3Sep 9Huawei HarmonyOS: out-of-bounds readCVE-2026-81647no fix yetMedium 5.5Sep 9Permission control vulnerability in the app lock moduleCVE-2026-49313no fix yetHigh 7.3Sep 9Huawei HarmonyOS: out-of-bounds readCVE-2026-49314no fix yetHigh 7.1Sep 9Huawei EMUI: denial of serviceCVE-2026-49315no fix yet